diff --git a/deps/v8/tools/clusterfuzz/js_fuzzer/.snyk b/deps/v8/tools/clusterfuzz/js_fuzzer/.snyk new file mode 100644 index 00000000000000..49ab010d4e7344 --- /dev/null +++ b/deps/v8/tools/clusterfuzz/js_fuzzer/.snyk @@ -0,0 +1,67 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:debug:20170905': + - pkg > globby > fast-glob > micromatch > snapdragon > debug: + patched: '2023-07-07T17:21:00.632Z' + id: 'npm:debug:20170905' + path: pkg > globby > fast-glob > micromatch > snapdragon > debug + - pkg > globby > fast-glob > micromatch > braces > snapdragon > debug: + patched: '2023-07-07T17:21:00.632Z' + id: 'npm:debug:20170905' + path: pkg > globby > fast-glob > micromatch > braces > snapdragon > debug + - pkg > globby > fast-glob > micromatch > extglob > snapdragon > debug: + patched: '2023-07-07T17:21:00.632Z' + id: 'npm:debug:20170905' + path: pkg > globby > fast-glob > micromatch > extglob > snapdragon > debug + - pkg > globby > fast-glob > micromatch > nanomatch > snapdragon > debug: + patched: '2023-07-07T17:21:00.632Z' + id: 'npm:debug:20170905' + path: pkg > globby > fast-glob > micromatch > nanomatch > snapdragon > debug + - pkg > globby > fast-glob > micromatch > extglob > expand-brackets > debug: + patched: '2023-07-07T17:21:00.632Z' + id: 'npm:debug:20170905' + path: >- + pkg > globby > fast-glob > micromatch > extglob > expand-brackets > + debug + - pkg > globby > fast-glob > micromatch > extglob > expand-brackets > snapdragon > debug: + patched: '2023-07-07T17:21:00.632Z' + id: 'npm:debug:20170905' + path: >- + pkg > globby > fast-glob > micromatch > extglob > expand-brackets > + snapdragon > debug + SNYK-JS-LODASH-567746: + - '@babel/traverse > lodash': + patched: '2023-07-07T17:21:00.632Z' + id: SNYK-JS-LODASH-567746 + path: '@babel/traverse > lodash' + - '@babel/traverse > @babel/generator > lodash': + patched: '2023-07-07T17:21:00.632Z' + id: SNYK-JS-LODASH-567746 + path: '@babel/traverse > @babel/generator > lodash' + - '@babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash': + patched: '2023-07-07T17:21:00.632Z' + id: SNYK-JS-LODASH-567746 + path: >- + @babel/traverse > @babel/helper-split-export-declaration > + @babel/types > lodash + - '@babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash': + patched: '2023-07-07T17:21:00.632Z' + id: SNYK-JS-LODASH-567746 + path: >- + @babel/traverse > @babel/helper-function-name > + @babel/helper-get-function-arity > @babel/types > lodash + - eslint > lodash: + patched: '2023-07-07T17:21:00.632Z' + id: SNYK-JS-LODASH-567746 + path: eslint > lodash + - eslint > inquirer > lodash: + patched: '2023-07-07T17:21:00.632Z' + id: SNYK-JS-LODASH-567746 + path: eslint > inquirer > lodash + - eslint > table > lodash: + patched: '2023-07-07T17:21:00.632Z' + id: SNYK-JS-LODASH-567746 + path: eslint > table > lodash diff --git a/deps/v8/tools/clusterfuzz/js_fuzzer/package.json b/deps/v8/tools/clusterfuzz/js_fuzzer/package.json index 5a7796e6777485..281e58509f433b 100644 --- a/deps/v8/tools/clusterfuzz/js_fuzzer/package.json +++ b/deps/v8/tools/clusterfuzz/js_fuzzer/package.json @@ -4,7 +4,9 @@ "description": "", "main": "run.js", "scripts": { - "test": "APP_NAME=d8 mocha" + "test": "APP_NAME=d8 mocha", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "bin": "run.js", "author": "ochang@google.com", @@ -18,16 +20,18 @@ "commander": "^2.11.0", "globals": "^10.1.0", "tempfile": "^3.0.0", - "tempy": "^0.5.0" + "tempy": "^0.5.0", + "@snyk/protect": "latest" }, "devDependencies": { - "eslint": "^6.8.0", - "mocha": "^3.5.3", - "pkg": "^4.3.4", + "eslint": "^7.0.0", + "mocha": "^10.1.0", + "pkg": "^5.0.0", "prettier": "2.0.5", "sinon": "^4.0.0" }, "pkg": { "assets": "resources/**/*" - } + }, + "snyk": true }